OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

learn more… | top users | synonyms

0
votes
1answer
19 views

How can one force Open Directory server to provide its full certificate chain to connecting clients?

The Problem We've created an Open Directory master on OSX 10.10 Yosemite + Server.app v4: $ sudo slapconfig -createldapmasterandadmin admin Administrator 1000 Which generates a root CA, an ...
0
votes
1answer
14 views

Unable to connect to server via LDAPS

I'm running OpenLDAP on an up-to-date Debian box. I'm trying to run a simple command: ldapsearch -x -h <<IP>>:636 -D cn=<<BASE DN>> -d1 and I get this output: ldap_create ...
0
votes
1answer
41 views

How to enable DIGEST-MD5 SASL mechanism in Open Directory?

We've created an Open Directory master on OSX 10.10 Yosemite + Server.app v4: $ sudo slapconfig -createldapmasterandadmin admin Administrator 1000 But it doesn't support DIGEST-MD5: $ ldapsearch ...
1
vote
1answer
16 views

command line alternative to dpkg-reconfigure slapd

Is there a way to reconfigure slapd, providing all configuration options as command-line parameters/arguments? My goal is to be find an alternative to the interactive UI. Thank you
2
votes
0answers
14 views

LDAP fixed length string attribute

I'm building a LDAP schema for OpenLDAP in which one of the attributes is a numeric identifier that has a constant length (e.g. 10). I am using for it the numericString syntax ...
0
votes
0answers
23 views

Error 19 (0x13) replicating OpenLDAP using Syncrepl

I'm trying to get an OpenLDAP master to perform push-only replication to remote OpenLDAP consumers using the LDAP backend as a proxy. The master will be able to reach the slaves, but the slaves can't ...
2
votes
1answer
18 views

Red Hat 6.6, OpenLDAP, ldaps not responding

I'm having a hard time migrating our openldap installation from Debian to RedHat. Two instances of openldap are running, they have the same configuration, except that one handles ldap: requests, and ...
2
votes
1answer
27 views

What is the maximum value for a gid in OpenLDAP

Our company has many individual sites that currently each have their own scheme for Linux authentication. We are looking at redesigning to have one unified scheme with the future plan of porting all ...
0
votes
0answers
8 views

Custom schema for OpenLDAP 2.4

I am new to OpenLDAP administration. My aim is to learn how to create custom schemas, and customize "my" directory server this way. I tried to add one optional attribute - ipPhone. Made a schema ...
0
votes
0answers
14 views

ApacheDS create new ldap base domain

I want to create and manage multiple ldap base domains(domain.com, example.net..) on a single Ubuntu server 14.04. I created my second domain(dc=example,dc=com) through olc method by ldapadd -Y ...
0
votes
0answers
16 views

Apache HTTP Server LDAP authentication with netgroups

Is it possible to do a group authentication in Apache HTTP Server ("Require ldap-group") but instead of a normal (posix) ldap group to use a netgroup?
0
votes
1answer
89 views

ldapsearch returns result, but getent does not

I am setting up a fresh CentOS 7 server to and need to setup LDAP authentication i.e. there already exists a server that authenticates users, which we use for other GNU/Linux servers. For instance, ...
0
votes
1answer
60 views

What is SSHA-512? How can OpenLDAP support it?

I have two OpenLDAP directory servers. One is a standard Zimbra OpenLDAP server. Accounts are with passwords that are using SSHA-512 hash method. When I copy these accounts to a standard OpenLDAP ...
0
votes
1answer
30 views

LDAP passthrough authentication. testsaslauthd fails only with ldaps

I am trying to set up an OpenLDAP passthrough authentication to another server. When I do testsaslauthd with simple ldap:// the test works fine. When I try with ldaps:// it fails. ...
3
votes
1answer
29 views

Chasing referrals in Ldap

I'm currently improving a program featuring an ldap integration. This ldap integration is currently not able to handle ldap referrals. I do understand, that i will gen entries back that will hold the ...
1
vote
1answer
29 views

Get password policy information from LDAP Server

Is there a way to get the password policy information (password length, complexity etc) of a user from an OpenLDAP server? (with ldapsearch or some other way).
0
votes
1answer
66 views

SSH access to hosts groups based on user groups using LDAP

This is my entire test ldap database for now: # extended LDIF # # LDAPv3 # base <dc=ldap,dc=example,dc=com> (default) with scope subtree # filter: (objectclass=*) # requesting: ALL # # ...
0
votes
0answers
20 views

adding VLV support to OpenLDAP 2.4.31

Apologize in advance - I am not an admin, so the question being asked might be trivial. Still, I am stuck. Any assistance would be greatly appreciated. I am trying to add Virtual List View support to ...
0
votes
0answers
37 views

moving openldap server from centos to ubuntu

I am trying to setup ldap server on my ubuntu 14.04. I had previous ldap server setup installed on CentOS 6 which uses flat-file configuration i.e slapd.conf method for ldap. I did take backup for my ...
0
votes
1answer
44 views

can't get “memberof” to work in my OpenLDAP config

I'm trying to set up OpenLDAP on a Debian 7.7 server. While basic auth seems to work, I can't get the "memberof" overlay to work. Being new to LDAP, all that memberof config seems overly complex to ...
0
votes
0answers
15 views

Openldap Master Slave configuration

I have a configuration with a Master and Slave 4. Provider and Consumer are identical CentOS release 6.5 rpm -qa | grep ldap openldap-clients-2.4.23-34.el6_5.1.x86_64 ...
0
votes
0answers
25 views

OpenLDAP 2.4 pass-through SASL configuration

I am having a hard time configuring pass-through on LDAP 2.4, mainly because most of the information in the internet is written for the older LDAP versions... I am looking to configure SASL but when ...
0
votes
0answers
35 views

I am not able to configure LDAP on Debian 7.7

I have a Debian 7.7 box and have installed openldap-2.4.31 from repos, but I can't manage to configure it. I run the install commands and it goes well, I am following this how to, then when I try to ...
0
votes
1answer
27 views

Send email on ldap creation

I have an LDAP server setup on a server running Debian 7 and I wanted to make it send out an email whenever a new user was created on that LDAP. I thought a cronjob would be best, but I have no idea ...
0
votes
0answers
16 views

Need informatio​n on alock file in data directory of OpenLDAP 2.4.39

I have taken the OpenLDAP 2.4.39 and able to work properly but when I do slapcat it hangs and always complains on alock,But if I delete alock file and restart it works fine. I have 4.6.21 version of ...
0
votes
1answer
17 views

Give su permission to LDAP group

I created an LDAP environment and i'm trying to set up a group in the LDAP server that has SU priviledges in all other linux machine that use this ldap server. dn: ...
-1
votes
1answer
51 views

cannot do an ldapdelete: Strong(er) authentication required (8)

I'm fairly new to ldap and i'm trying to delete a ldap object. (i haven't set up SSL yet.) i use the command ldapdelete -x 'dc=example,dc=com' 'cn=AnUser' it gives me the error ldap_delete: ...
0
votes
1answer
90 views

libnss-ldap getent passwd - AD replies correctly but output shows local /etc/passwd

I am trying to configure libnss-ldap to provide AD authentication to my Linux Debian servers. This is working fine if user exists locally, I want to make it work for Domain users. Here is my ...
1
vote
0answers
47 views

How cache OpenLDAP Meta database (for use with Websphere Application Server)?

I have configured Meta database directory on OpenLDAP server for two different Active Diretories and it's work. But now I'd like set cache for this OpenLDAP, but I don't know how. From my slapd.conf ...
0
votes
1answer
19 views

How to enable OpenLDAP log on CentOS 6.4

I have installed OpenLDAP 2.4.23 on CentOS 6.4. Default install. OpenLDAP does not seem to create any log information. At times it is convient to have some information on what OpenLDAP is doing. How ...
0
votes
0answers
21 views

OpenLDAP on CentOS 6.5, changing OU?

Followed these instructions (apparently not completely) http://www.itmanx.com/kb/centos6/install-openldap-phpldapadmin Under "Create initial LDAP structure" where I define the initial structure, ...
3
votes
2answers
143 views

Apache/PHP ldap stops working. Requires restart of apache

I currently have a setup where users log in to a website using LDAP credentials. It's all internal so I don't really care a ton about certificates. So, in my /etc/openldap/ldap.conf file I have ...
1
vote
1answer
26 views

Is “dc=nomain” a in LDAP ACLs?

I'm trying to set up my first LDAP server. I can't get clients to authenticate using it even though everything seems to be working. i suspect the ACLs might be the problem since i can't see the ACLs ...
0
votes
1answer
45 views

LDAP Schema implemetation in existing LDAP server

I have a user defined schema ,which is to be added into the existing LDAP server. Its ldif format is: dn: cn=userControl,cn=schema,cn=config objectClass: olcSchemaConfig cn: userControl ...
0
votes
1answer
98 views

Set up LDAP on Redmine with Zimbra LDAP

I'm trying to enable LDAP authentication for a Redmine installation. My LDAP Server is the one provided by Zimbra, and I'm perfectly sure that it works good (I use LDAP also for ownCloud server, in ...
0
votes
0answers
69 views

OpenLDAP Invalid credentials on CentOS 7

Afternoon all I'm using Puppet to provision some OpenLDAP servers. The module I'm using is: datacentred-ldap, and the manifest I'm using looks like: ldap-class This process works fine on CentOS 6 ...
0
votes
1answer
41 views

LDAP configuration for Mac server

We just migrated our php webapps to a new web server (Mac OS X 10.9.5). We are having trouble with ldap logins to the webapps. We are able to successfully connect to a remote ldap server, but when we ...
0
votes
1answer
210 views

openLDAP how to remove the nis schema from the current configuration

openLDAP 2.4 Ubuntu 14.04 I have found this question dn-based linux groups from ldap. I am trying to include the rfc2307bis schema, but it seems the nis schema must be removed from the configuration ...
0
votes
1answer
66 views

How to set a user as RootDN in OpenLDAP

I have installed OpenLDAP and phpLDAPadmin on Ubuntu 14.04. I have a default RootDN which is something like: cn=admin,dc=example,dc=com Then I have created some users and groups organizational ...
0
votes
0answers
67 views

How can I use LDAP and Kerberos for web auth only, not server auth

I have read this question on proper kerberos integration and this question on enterprise authentication, neither are helpful to me at this point in time though they did provide some good background. ...
0
votes
0answers
15 views

Issues in olcAccess in OpenLDAP

I have applied ACLs in OpenLDAP using olcAccess. My applied conf is as follows :- olcAccess: {0}to attrs=userPassword by dn="cn=Manager,dc=tacacs,dc=abc,dc=in" write by ...
0
votes
1answer
359 views

openSUSE 13.1 pam_ldap error trying to bind invalid credentials

Environment: new install of openSUSE 13.1 into a internal network of mostly 10.2 and 10.3 openSUSE. LDAP server (@(#) $OpenLDAP: slapd 2.3.19 (Jul 28 2006 17:00:02)) running on SUSE LE 10 . ...
3
votes
2answers
90 views

openldap allop overlay configuration

I'm having trouble getting the allop overlay to work. I suspect I'm missing some vital configuration option or that I've done something incorrectly. Any help is greatly appreciated. I need to use ...
0
votes
2answers
68 views

How to configure OpenLDAP server and test using Apache HTTPD

I am using CentOS 6. I found a great article on how to install and configure OpenLDAP on CentOS 6, and I found some other great documentation here on how to configure LDAP to work on Apache HTTPD (I ...
0
votes
1answer
154 views

Error “no equality matching rule” when editing LDAP Syncprov Overlay

I have an OpenLDAP OLC server (2.4.23) to which I am trying to simply add two attributes to the Syncprov overlay file, but am encountering some difficulty. Here are the contents of the ...
0
votes
0answers
108 views

Confused about olcServerID for LDAP Sync Replication

Simplified question: How do you set olcServerID in olcDatabase configuration files? More detailed question: I have looked through several documents on how to enable Sync Replication for OLC on ...
0
votes
1answer
36 views

Error while configuring openldap with ssl

I have a certificate from Digicert and I have added the keys to the bdb config file. The rest of the LDAP setup works fine except the SSL part. I have added a Mozilla certificate store as well, but i ...
0
votes
1answer
44 views

OpenLDAP directory structure for a distributed organization

I'm looking for an optimal design for a new OpenLDAP infrastructure. I read the following answers(s) but it did not answer what I was looking for. Active Directory OU design for <500 users, 4 ...
1
vote
2answers
894 views

Client Authentication “Invalid credentials” LDAP

I've installed LDAP Client Authentication with this manual, but in my /var/log/auth.log file I get this error: Sep 5 14:08:59 workstation01 nscd: nss_ldap: failed to bind to LDAP server ...
0
votes
1answer
217 views

Fix “DNS hostname not available” on server behind firewall

I am running Max OS X Server and can't set up Open Directory. I get an error saying that "This computer's host name is invalid. The host name does not resolve to any configured address of this ...